Privacy policy

ZYRCLO, a société par actions simplifiée (SAS) with variable capital, SIREN 953 819 497, registered office 5 Descente de l'Estéron, 06910 Roquestéron, France, reachable at [email protected]. Given the size of the company, appointing a data protection officer is not required under article 37 of the GDPR. The contact point for any question about data protection is the address above.

When you fill in the contact form on this site, the information you enter (name, contact details, message) is sent to and stored in a database hosted in the European Union (Supabase), on behalf of ZYRCLO. This data is used solely to handle your enquiry. Legal basis: pre-contractual steps taken at your request, or ZYRCLO's legitimate interest in replying to you. Retention: 3 years from the last exchange, unless a longer legal retention period applies.

This site uses an audience measurement tool developed in house: no third-party cookies, no advertising tools, no Google Analytics. It records the page visited, the referring site, the device type and a visit identifier kept in your browser's local storage, for ZYRCLO's use only. Legal basis: ZYRCLO's legitimate interest in knowing how its site is used. Retention: 13 months maximum.

Since 6 September 2026, the site uses Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure traffic: pages viewed, where visits come from, device type. It sets cookies and transfers data to the United States (see section 8). It loads only once you have agreed. Until you accept, no request is sent to Google and no cookie is set. You can change your mind at any time through the “Cookies” link in the footer. Legal basis: your consent (GDPR Article 6(1)(a)). Retention: as configured in Google Analytics, capped at 14 months for event data.

The home page and The workshop page include a video module supplied by a third party, TIMELAPSE GO' (SAS, SIREN 820 682 235, 3 rue Nationale, 92100 Boulogne-Billancourt, France), which streams images of the workshop build in Villars-sur-Var. Since 6 September 2026, the module loads only once you have agreed. Until you accept, the provider's address is never called and none of its cookies are set: the video is replaced by a placeholder. A button there shows the webcam for that visit alone, without accepting audience measurement. Legal basis: your consent (GDPR Article 6(1)(a)). Retention: set by TimeLapse Go', outside ZYRCLO's control.

When the home page loads, it queries a third-party service (api.sunrise-sunset.org) to match the visual mood of the site to the time of sunset; that call passes your IP address to the provider as part of the technical request, with no other data. It is the only automatic call to a third-party domain left on this site: the script once used for the article contents list is now loaded locally, with no external dependency. To date, this service is not known to set any cookie.

Your data is shared only with the providers needed to run the site: Supabase (database hosting, European Union), Cloudflare, Inc. (site hosting), MonaHub / Clément Monin (CMC 6, technical provider), TIMELAPSE GO' (workshop webcam), Google Ireland Limited (Google Analytics audience measurement, after your consent). It is neither sold nor passed to third parties for commercial purposes.

Hosting the site with Cloudflare, Inc. (a US company with worldwide infrastructure) involves a data transfer covered by the European Commission's standard contractual clauses. TIMELAPSE GO' is a French company; to date, no transfer outside the European Union has been identified for that provider. Google Analytics (see section 4) transfers data to the United States; that transfer is covered by the same standard contractual clauses and only happens after your consent.

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise those rights, write to [email protected]. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

The in-house audience measurement described in section 3 works without third-party cookies and without sharing across sites. It falls under the exemption the CNIL grants to in-house audience measurement tools, so it does not ask for your consent. The call to api.sunrise-sunset.org (section 6) is a plain technical request, with no known cookie. Two elements set cookies and ask for your agreement: Google Analytics (section 4) and the TimeLapse Go' video module (section 5). A banner introduces them on your first visit. Until you answer, neither is loaded and no request reaches those services. Declining is as easy as accepting. Your choice is kept in your browser for six months, then the question is asked again. The “Cookies” link in the footer lets you change it at any time.

For any question about this privacy policy, write to [email protected].